chore(ocm-kit): update ocm-kit tooling

[ocmbot]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/golangci/golangci-lint/v2/cmd/golangci-lint	v2.13.1 → v2.13.2
ocm.software/open-component-model/cli	v0.14.0 → v0.15.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

golangci/golangci-lint (github.com/golangci/golangci-lint/v2/cmd/golangci-lint)

v2.13.2

Compare Source

Released on 2026-08-28

1. Bug fixes
   • Decrease cache entropy
2. Linters bug fixes
   • iface: from 1.5.0 to 1.5.1
   • staticcheck: from 0.8.0 to 0.8.1
   • unparam: from 3f964bc to 2fa3d84
   • canonicalheader: from v1.1.2 to a temporary fork

open-component-model/open-component-model (ocm.software/open-component-model/cli)

v0.15.0: OCM 0.15.0

Compare Source

Promoted from v0.15.0-rc.1 on 2026-09-08

[0.15.0] - 2026-09-08

🚀 Features

• Migrate the signature configuration usage into the CLI (#​3356)
• Oci cache cli and controller wiring (#​3433)

🐛 Bug Fixes

• Update versioncheck test to new release tags (#​3362)
• Thread http config for resource repository in cli [2/2] (#​3402)
• (cli) Remove downloadName label, --output wins, fallback to resource name (#​3241)
• #​1254 allow non digest processor available for custom resources [2/2] (#​3417)

📚 Dependencies

• (deps) Update digest pins (#​3375)
• (deps) Update golang:1.26.5 docker digest to 705e964 (#​3377)
• (deps) Update ghcr.io/open-component-model/kubernetes/controller:latest docker digest to 302eb14 (#​3376)
• (deps) Update module github.com/ebitengine/purego to v0.10.2 (#​3378)
• (deps) Update module github.com/docker/cli to v29.6.2+incompatible (#​3380)
• (deps) Update module github.com/gabriel-vasile/mimetype to v1.4.14 (#​3381)
• (deps) Update module ocm.software/open-component-model/bindings/go to v0.0.2 (#​3382)
• (deps) Update module ocm.software/open-component-model/bindings/go to v0.0.2 (#​3358)
• (deps) Update module github.com/moby/go-archive to v0.3.0 [security] (#​3407)
• (deps) Update kubernetes controller dependencies (non-major) (#​3445)
• (deps) Update module github.com/klauspost/compress to v1.19.1 (#​3442)
• (deps) Update go-openapi packages to v0.27.3 (#​3439)
• (deps) Update kubernetes controller dependencies (non-major) (#​3454)
• (deps) Update module ocm.software/open-component-model/bindings/go to v0.0.6 (#​3460)
• (deps) Update module go.opentelemetry.io/proto/otlp to v1.11.0 (#​3452)
• (deps) Update digest pins (#​3437)
• (deps) Update kubernetes dependencies to v0.36.3 (#​3440)
• (deps) Update module github.com/mattn/go-runewidth to v0.0.27 (#​3443)
• (deps) Update module github.com/go-logr/logr to v1.4.4 (#​3441)
• (deps) Update github.com/ianlancetaylor/demangle digest to 83e58ba (#​3438)
• (deps) Update module github.com/gabriel-vasile/mimetype to v1.4.15 (#​3446)
• (deps) Update module github.com/jedib0t/go-pretty/v6 to v6.8.3 (#​3448)
• (deps) Update module github.com/docker/go-connections to v0.8.0 (#​3450)
• (deps) Update module github.com/magiconair/properties to v1.18.11 (#​3451)
• (deps) Update module github.com/stretchr/testify to v1.12.0 (#​3456)
• (deps) Update module github.com/google/cel-go to v0.30.0 (#​3455)

⚙️ Miscellaneous Tasks

• Update CLI and controller to require monolithic binding module (#​3368)
• Update CLI integration tests to require monolithic binding module (#​3369)
• Migrate k8s e2e test to ocm v2 (#​3277)
• [breaking] Remove upload-as default default (#​3278)
• (cli) [breaking] Bump bindings/go and remove default flag for --upload-as (#​3393)

Get This Release

Install the OCM CLI

curl -sfL https://ocm.software/install-cli.sh | OCM_VERSION=0.15.0 bash

For alternative installation options, see the installation guide.

You can also run the OCM CLI in a container without installing it:

docker run --rm -t ghcr.io/open-component-model/cli:0.15.0 --help

See the container image guide for more details.

Deploy the OCM Controller

Install into a Kubernetes cluster via Helm:

helm install ocm-k8s-toolkit oci://ghcr.io/open-component-model/kubernetes/controller/chart \
--version 0.15.0 \
--namespace ocm-k8s-toolkit-system \
--create-namespace

See the controller setup guide for full configuration options.

OCM Component Distribution (for existing OCM users)

Every OCM release is published as OCM component versions to ghcr.io/open-component-model - the same distribution mechanism OCM enables for your own software. Components in this release:

Component	Contents
ocm.software/ocm:0.15.0	Product wrapper referencing CLI + controller
ocm.software/cli:0.15.0	CLI binaries and OCI image
ocm.software/kubernetes/controller:0.15.0	Controller image and Helm chart

Inspect the full product component:

ocm get component-version ghcr.io/open-component-model//ocm.software/ocm:0.15.0 -o yaml

Download a CLI binary directly via OCM (requires OCM CLI already installed; replace os and architecture as needed — e.g. linux/amd64, darwin/arm64):

ocm download resource ghcr.io/open-component-model//ocm.software/cli:0.15.0 \
--identity os=linux,architecture=amd64

Community & Contributors

This release we had a total of 8 contributors!
If you want to engage with us, check our community page!

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.